httpd file write permissions!

[Aseem Khurana]

Hi,
 
a. my /etc/group file says:- webdev:x:504:user1,user2,apache
 
b. ls -l /var/ww/html/ says: drwxrwxr-x webDir(dir) user1(own) webdev(grp)
 
This was made so that two users could use vi on putty to edit the files remotely as well as allow apache to write files in the logs subdirectory.
 
Now I have 2 questions:-
 
1. Is this the right way of doing things? I mean, Is this setup okay from security point of view, considering firewall is blocking all other things than 80, but keeping in view the possibilities of hacking apache?
 
2. Every time apache writes a new file to the logs folder, this file gets 744, what should I do so that the file gets 775?
 
 
 
thx,
wavelength.

 


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.6 - Release Date: 2/7/2005